When I was in college, one of my company instructors told us students that one of the greatest barriers to making money in business was procrastination.
Cloning, as it applies to secure your wordpress website, is the act of making an exact replica of your WordPress install. What's good is that with the right software, you can do it. There are a lot of reasons why you might want to do this. Here are only a few.
I protect an access to important files on the blog's server by putting an index.html file in the particular directory, which hides the files out of public view.
Yes, you need to do regular backups of your site. I recommend at least a weekly database backup and a monthly "full" backup. More, if at all possible. Definitely more, if you make frequent additions and changes to your website. If you have a community of people that are in there all the time, or make changes multiple times every day, a backup should be a minimum.
Note that this step for new installations should only try. If you might like to do it you will also need to change the table names inside the database.
Oh . And incidentally, I talked about plugins. Make sure it's a secure one when you get a plugin. Don't install any plugin because the owner is saying that plugin can help you do this or that. Use a test blog he said to look at the plugin, or perhaps get a software engineer to analyze it. This way isn't a threat for you or your business.